Chaos Fault Injection

Inject controlled failure modes (LLM timeout, tool deny, trust suppress) to verify governance cascades. Engagement is operator-driven, sampled, role-allowlisted, and auto-expires.

State is in-memory; host restart auto-disengages. Hard cap on session duration: 4 hours.

Refresh
ErrorFailed to load chaos state: Connection refused (ame-api.internal:8080)
Chaos disabled Chaos is not enabled on this host (Governance:Chaos:Enabled=false) or the governance kernel is unavailable.